EvernoteSubprocess.exe
  - File Path: 
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe 
  - Description: Evernote Subprocess
 
Hashes
  
    
      | Type | 
      Hash | 
    
  
  
    
      | MD5 | 
      A6A76DAE91BDF1153E7FBB77A6E2F6AF | 
    
    
      | SHA1 | 
      CB1C8534C59A38F797D70DF639BCD2DB3DB8FD5F | 
    
    
      | SHA256 | 
      4A6A4CB1E2D8269ED71C0B6A8A13652D66F7D33D354C09C3A389124CF06ED9BD | 
    
    
      | SHA384 | 
      EAD83E3C8842AC4922C7634FBCABAAE25C0F2BCBB077289CF08A94550B687661B83E2D293EAAB18E82C03739C9053E55 | 
    
    
      | SHA512 | 
      F00899134870A48E8462F5C99AECB56A92C18AB5D9F22C5CE9B80E16B1D30078026233FA5E8A06E538EDF37FFA253D79A3E62E989041122702027A431914CEA9 | 
    
    
      | SSDEEP | 
      12288:ZvrQvWc31pzPTk7DEb77DQQxz975lP4KmiNtQn:+vWc31pzPTk7DEb77DQmh450Qn | 
    
    
      | IMP | 
      22A3139D2CDDF0CEC1EA850F1A9DA1B9 | 
    
    
      | PESHA1 | 
      B72028FECFFEBB62C6F744EE939BFC02ECF9EEDB | 
    
    
      | PE256 | 
      B792539C665AC9847C84E1D47091BC92E0DA27A4749070AA9A478CB856D1AEC1 | 
    
  
Runtime Data
Open Handles:
  
    
      | Path | 
      Type | 
    
  
  
    
      | (RW-)   C:\Windows | 
      File | 
    
    
      | (RW-)   C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 | 
      File | 
    
    
      | (RW-)   C:\xCyclopedia | 
      File | 
    
    
      | \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | 
      Section | 
    
    
      | \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | 
      Section | 
    
  
Loaded Modules:
  
    
      | Path | 
    
  
  
    
      | C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe | 
    
    
      | C:\Windows\SYSTEM32\ntdll.dll | 
    
    
      | C:\Windows\System32\wow64.dll | 
    
    
      | C:\Windows\System32\wow64cpu.dll | 
    
    
      | C:\Windows\System32\wow64win.dll | 
    
  
Signature
  - Status: Signature verified.
 
  - Serial: 
0F6C6C76C237FDBD4775DF1EEC48E4E7 
  - Thumbprint: 
AC51E96E30DB8C8AB1657078805399F405626259 
  - Issuer: CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US
 
  - Subject: CN=Evernote Corporation, O=Evernote Corporation, L=Redwood City, S=CA, C=US
 
  - Original Filename: EvernoteSubprocess.exe
 
  - Product Name: Evernote
 
  - Company Name: Evernote Corp., 305 Walnut Street, Redwood City, CA 94063
 
  - File Version: 6,25,1,9091
 
  - Product Version: 6,25,1,9091
 
  - Language: English (United States)
 
  - Legal Copyright: Copyright 2020 Evernote Corporation.
All rights reserved.
 
  - Machine Type: 32-bit
 
File Scan
  - VirusTotal Detections: 0/72
 
  - VirusTotal Link: https://www.virustotal.com/gui/file/4a6a4cb1e2d8269ed71c0b6a8a13652d66f7d33d354c09c3a389124cf06ed9bd/detection/
 
MIT License. Copyright (c) 2020-2021 Strontic.